PT-2023-5688 · Ipswitch · Ws Ftp Server

Sean Yeoh + 1 · Publicado 2023-09-27 · Atualizado 2026-06-17 · CVE-2023-40044

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WS FTP Server versions prior to 8.7.4 and 8.8.2

Description The issue is related to a .NET deserialization vulnerability in the Ad Hoc Transfer module of WS FTP Server. This vulnerability can be exploited by a pre-authenticated attacker to execute remote commands on the underlying WS FTP Server operating system. The vulnerability has been observed being actively exploited in the wild, and it is estimated that a significant number of devices may be affected.

Recommendations For WS FTP Server versions prior to 8.7.4, update to version 8.7.4 or later. For WS FTP Server versions prior to 8.8.2, update to version 8.8.2 or later. As a temporary workaround, consider disabling the Ad Hoc Transfer module until a patch is available.

Exploit

Correção

RCE

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2023-06356

CVE-2023-40044

Produtos afetados

Ws Ftp Server

Referências · 108

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ws_ftp_rce_cve_2023_40044.rb · Exploit
• 🔥 https://assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044 · Exploit
• 🔥 http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html · Exploit
• https://progress.com/ws_ftp · Aviso do Fabricante
• https://twitter.com/catc0n/status/1707737470492651681 · Publicação no Twitter
• https://twitter.com/securestep9/status/1707912043662131461 · Publicação no Twitter
• https://twitter.com/MCKSysAr/status/1707748203292954842 · Publicação no Twitter
• https://t.me/aptreports/5841 · Publicação no Telegram
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-40044 · Nota
• https://twitter.com/VladEugenM1/status/1710183689492074650 · Publicação no Twitter
• https://twitter.com/qualys/status/1707823701205418259 · Publicação no Twitter
• https://theregister.com/2023/10/02/ws_ftp_update · Nota
• https://twitter.com/synfinner/status/1968364716268413404 · Publicação no Twitter
• https://t.me/thebugbountyhunter/7926 · Publicação no Telegram
• https://twitter.com/assetnote/status/1708272163772682602 · Publicação no Twitter